SepIsAdminlessAuditModeEnabled

BOOL __stdcall SepIsAdminlessAuditModeEnabled(){
  return *(&stru_140CF2E80 + 1955) != 0;
}